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TIMELINE PROTECTION 

FIELD OF THE INVENTION 
The present invention relates to audio and video encoding systems, and 

S more particularly to media timelines in video and audio encoding systems and their 

use by broadcast applications. 

BACKGROUND OF THE INVENTION 
Published PCT Patent Application WO 02/079955 of NDS Ltd., and 

10 corresponding US Patent Application 10/472,286 of ShenOir et al., the disclosures of 
which are hereby incorporated herein by reference, describe a system and method for 
providing variable security mechanisms for securing digital content, in which a single 
security mechanism is not used for all content. Rather, at least one characteristic or 
feature of the security mechanism is varied between units, instances or categories of 

1 5 content. Hence, even if unauthorized access is gained to a single unit of content, the 
overall integrity and security of the system for content distribution is not 
compromised. Security is preferably provided through a general mechanism, which is 
then varied in order to provide variable, dissimilar security schemes for different 
types of content. 

20 The following standards are also believed to be of relevance to the 

present invention: 

ETSI TS 102 822-3 Broadcast and On-line Services: Search, 
select, and Rightful Use of Content on Personal Storage Systems ("TV-Anytime 
Phase 1"); Part 3: Metadata. 
25 ISO/IEC 13818-6 Information Technology Generic Coding of 

Moving Pictures and Associated Audio Information Part 6: Extensions for Digital 
Storage Media Command and Control. 

The disclosures of all references mentioned above and throughout the 
present specification, as well as the disclosures of all references mentioned in those 
30 references, are hereby incorporated herein by reference. 
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SUMMARY OF THE INVENTION 
The term "timeline" is used throughout the present specification and 
claims to refer to a record of the progression of time from a start of content within a 
stream of audio / visual data. Metadata and interactive applications can be authored 

5 to have specific events occur at specific points of a timeline, thereby synchronizing 
the metadata and interactive applications to the content. In order to maintain 
synchronization of metadata or of an interactive application, the tuneline for the 
content needs to pause during advertisement breaks* 

However, havmg a tuneline that comprises pauses for advertisement 

10 breaks may reveal where advertisement breaks occur in programs. If a Personal 
Video Recorder CPVR) can determine where an advertisement break is, then the PVR 
is able to automatically skip the advertisements. Skipping of advertisements puts 
mcome to broadcasters firom advertisers at risk. 

The present invention, in preferred embodiments thereof, provides a 

1 5 method for protecting a tuneline so that only authorized devices or applications can 
access the timeline. The method described can be used to protect platforms without a 
conditional access system. For example, and without limiting the generality of the 
foregoing, a terrestrial broadcaster, utilizing the present invention, may securely 
broadcast, without conditional access protection, a channel that is ordinarily broadcast 

20 with conditional access protection by a satellite broadcaster. The terrestrial 
broadcaster may broadcast the channel without conditional access protection since the 
timeline associated with content on the channel is encrypted. 

The inventor of the present invention believes that there might be 
moves to reject Nonnal Play Time (NPT) as the timeline format to use for 

25 segmentation information. One possible solution involves timecode delivered in a 
Packetized Elementary Stream (PES) stream. 

The present invention, in preferred embodiments thereof, is based on 
using a timeline delivered as video timecode; a limecode is a time reference in hours, 
nunutes, seconds, and firames, used to identify a fiame. The details of timecode 

30 expression are described below, with reference to Appendfac A. The tunelme can be 
adapted to work with a system based on defining an offset, for example an offset from 
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the MPEG system time clock (STC) such as nonnal play time (NPT) (refer to 
ISO/IEC 13818-6) or an offset from a video timecode. 

A timeline delivered as video timecode has a constant stream of 
timecode (a frame count, for example) closely tied to flie video, possibly delivered in 

S the adaptation field of packets or as a separate media stream (such as audio or video) 
with a Presentation Time Stamp (PTS) for each timecode value. This type of 
timeline, a preferred implementation of which is described below, is easier to use in a 
PVR than is NPT. 

Timeline values are encrypted using an encryption key. The timeline 

1 0 values can then be decrypted by a trusted device or application. 

The use of trusted applications is preferred because using trusted 
devices is not always possible; for example, and without limitmg the generality of the 
foregoing, use of trusted devices is not generally possible in a horizontal market. 
Furthermore, the producer of the content and of the application is the party most 

15 interested in protecting the timeline, while manufacturers are arguably the ones most 
interested in opening up the timeline. In preferred embodiments of the present 
invention, a trusted application can have an embedded decryption key and a 
decryption algorithm. Moving the location of the key data and changing the 
algorithm would provide a moving target for receiver manufacturers wishing to 

20 implement advertisement skipping. 

An implication of the present invention is that the application would 
manage monitoring the timeline and triggering of stream events. Reducing the 
frequency of timecode samples and using interpolation to fill in gaps can reduce 
additional processing overhead. Also, the encryption used does not need to be 

25 extremely secure in itself; the security comes more from moving the location of the 
key data and changing the algorithm. A preferred example of appropriate techniques 
for moving the location of the key data and changing the algorithm is found in 
Published PCT Patent Application WO 02/079955 of NDS Ltd., and corresponding 
US Patent Application 10/472,286 of Shen Orr et al., referred to above and 

30 incorporated herein by reference. Also, the inventors of the present invention believe 
that ad-skippmg is not a feature that people or organizations would put endless 
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resources into if encryption were used, because the value of skipping advertisements 
is low compared to the value of the content itself. 

In certain preferred embodiments of the present invention, it is the 
responsibility of a receiver to pass an enciypted timecode value to the application at 
S the time indicated by the PTS for the timecode value. The receiver cannot determine 
when a timeline pauses or restarts, or when stream events occur. Therefore the 
receiver cannot work out where advertisements are from the timeline. 

There is thus provided in accordance with a preferred embodhnent of 
the present invention a timecode generation method including receiving an encryption 

10 key and an implemented encryption method, for each one of a plurality of frames, 
receiving a timecode and an associated presentation time stamp (PTS) associated with 
the one frame, for each one of the plurality of frames, encryptuig the tunecode 
associated with the one frame using the encryption key and the implemented 
encryption method, thereby producing a plurality of encrypted timecodes, and at a 

15 tune associated with the associated PTS associated with the one frame, outputting a 
packetized elementary stream (PES) including the plurality of encrypted timecodes. 

There is also provided in accordance with another preferred 
embodiment of the present invention a timecode generation method including 
receiving an encryption key and an implemented encryption method, for each one of a 

20 plurality of frames, receiving a timecode and an associated decoding time stamp 
(DTS) associated with the one frame, the DTS occurring in advance of a presentation 
time stamp (PTS) associated with the one frame, for each one of the plurality of 
frames, encrypting the timecode associated with the one frame using the encryption 
key and the implemented encryption method, thereby producing a plurality of 

25 encrypted timecodes, and at a time associated with the associated DTS associated 
with the one frame, outputtmg a packetized elementary stream (PES) including the 
plurality of encrypted timecodes, the PES including the plurality of encrypted 
timecodes not being effective until a time associated with die PTS associated with the 
one frame. 

30 There is also provided in accordance with still another preferred 

embodiment of the present invention a tunecode generator including a first input unit 
operative to receive an encryption key and an implemented encryption method, a 
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second input unit operative to receive a timecode and an associated presentation time 
stamp (PTS) for each one of a plurality of frames, an encryptor operative to encrypt 
the timecode for each one of the plurality of frames, usmg the encryption key and the 
implemented encryption method, thereby producing a plurality of encrypted 

5 tunecodes, and a packetized elementary stream (PES) outputter operative to receive a 
plurality of encrypted tunecodes and, at a time associated with the associated 
presentation time stamp (PTS) associated with the one frame, to output a PES 
including the plurality of encrypted timecodes. 

There is also provided in accordance with another preferred 

10 embodiment of the present mvention a timecode use method including receiving an 
application file including a decryption key and an implemented decryption method, 
receiving a packetized elementary stream (PES) including a plurality of encrypted 
tunecodes, each of the plurality of timecodes being associated widi a presentation 
tune stamp (PTS), and running the application file, the runnmg mcluding: 

1 5 performing the following when a system time clock (STC) value 

equals a PTS value associated with at least one of the plurality of encrypted 
timecodes: 

decrypting the encrypted timecode associated with the 
PTS value using the decryption key and the implemented encryption method, thereby 
20 producing a decrypted timecode. 

There is also provided in accordance with still another preferred 
embodiment of the present invention a tfanecode use method including receiving an 
application file including a decryption key and an implemented decryption method, 
receiving a packetized elementary stream (PES) including a plurality of encrypted 
25 timecodes, each of the plurality of encrypted timecodes being associated with a 
decodmg time stamp CDTS), at least one of the plurality of encrypted timecodes 
requuing that a display be updated at one of a plurality of presentation time stamps 
(PTS), running the application file, the runnmg includmg: 

performing the following when a systemtime clock (STC) value 
30 equals a DTS value associated with at least one of the plurality of encrypted 
timecodes: 

5 
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decrypting the encrypted timecode associated with the 
DTS value using the decryption key and the implemented encryption method, thereby 
producing a decrypted timecode, and updating the display at the one of the plurality 
ofPTSs. 

5 There is also provided in accordance with another preferred 

embodunent of the present invention a tunecode handler includmg a first input unit 
operative to receive at least one application file including a decryption key and an 
implemented encryption method^ a second mput unit operative to receive a packetized 
elementary stream (PES) includmg a plurality of encrypted timecodes, each of the 

10 plurality of encrypted timecodes being associated with a presentation time stamp 
(PTS), and a decryptor receivmg each of the plurality of encrypted timecodes and 
operative to decrypt each of the plurality of encrypted timecodes usmg the decryption 
key and the implemented encryption metfiod when a system time clock (STC) value 
equals a PTS value associated with each of the plurality of encrypted timecodes. 

15 There is also provided in accordance with still another preferred 

embodiment of the present iavention a method for timeline protection including 
receiving, at a timecode generator, an encryption key and an implemented encryption 
method, for each one of a plurality of frames, receivmg, at the timecode generator, a 
timecode and an associated presentation time stamp (PTS) associated with the one 

20 frame, for each one of the plurality of frames, encrypting, at the timecode generator, 
the timecode associated with the one frame using the encryption key and the 
implemented encryption method, thereby producing a plurality of encrypted 
timecodes, at a time associated with the associated presentation time stamp (PTS) 
associated with the one frame, outputting a packetized elementary stream (PES) 

25 including the plurality of encrypted timecodes, receiving, at a timecode handier, an 
application file including a decryption key and an implemented decryption method, 
receiving, at the timecode handler, the PES mcluding a plurality of encrypted 
timecodes, each of the plurality of timecodes being associated with a presentation 
time stamp (PTS), and running the application file, the running including: 

30 at the application file, performing the followmg when a system 

time clock (STC) value equals a PTS value associated with at least one of the 
plurality of encrypted timecodes: 

6 
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decrypting the encrypted timecode associated with the 
PTS value using the decryption key and the implemented encryption method, thereby 
producing a decrypted timecode. 

There is also provided in accordance with another preferred 

5 embodhnent of the present invention a system for timeline protection including a 
timecode generator including: 

a timecode generator fkst input unit operative to receive an 
encryption key and an implemented encryption method, a timecode generator second 
input unit operative to receive a timecode and an associated presentation time stamp 

10 (PTS) for each one of a plurality of flames, a timecode generator encryptor operative 
to encrypt the timecode for each one of the plurality of frames, using the encryption 
key and the implemented encryption method, thereby producuig a plurality of 
encrypted timecodes, a timecode generator packetized elementary stream (PES) 
outputter operative to receive a plurality of encrypted timecodes and, at a time 

15 associated with the associated presentation time stamp (PTS) associated wiliidie one 
frame, to output a PES including the plurality of encrypted timecodes, and a timecode 
handler including: 

a timecode handler first input unit operative to receive at least 
one application file including a decryption key and an implemented decryption 

20 method, a timecode handler second input unit active to receive the PES including a 
plurality of encrypted timecodes, each of the plurality of encrypted timecodes being 
associated with a presentation time stamp (PTS), and a timecode handler decryptor 
receivmg each of the plurality of encrypted timecodes and operative to decrypt each 
of the plurality of encrypted timecodes using the decryption key and the unplemented 

25 encryption method when a system time clock (STC) value equals a PTS value 
associated with each of the plurality of encrypted timecodes. 
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BRffiF DESCRIPTION OF THE DRAWINGS AND APPENDICES 

The present invention will be understood and appreciated more ftiliy 
firom the following detailed description, taken in conjunction with the drawings in 
which: 

S Fig. 1 is a simplifiedpartly pictorial partly block diagram illustration of 

a system for timecode protection, constructed and operative in accordance with a 

prefetred embodiment of the present invention; and 

Fig. 2 is a graphical diagram of tuneline plotted against System Time 

Clock (STC), useful for understanding the system of Fig. 1. 
10 The following Appendices may be helpful in understanding certain 

preferred embodunents of the present invention: 

Appendix A is a tabular presentation of the format of a preferred 

embodiment of a tunecode packet for unencrypted timecode values, and of an 

encryption header for delivering the timecode packet; and 
1 5 Appendix B is a discussion of multiple timelines in the context of the 

system of Fig, 1. 
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DETAILED DESCRIPTION OF A PREFERRED EMBODIMENT 

Reference is now made to Fig. 1, which is a simplified partly pictorial 
partly block diagram illustration of a system for timecode protection, constructed and 
operative in accordance with a preferred embodiment of the present invention. In the 

S description of Fig. 1, a preferred embodiment of the present invention is described as 
implemented in a broadcast headend and a broadcast receiver. The implementation 
described can be adapted ui a number of ways. For example^ and without limiting the 
generality of the foregoing, the present invention may be' adapted for audio-only 
content or by using difTerent methods of encryption (such as, for example, 

10 public/private encryption, symmetric encryption, or any other appropriate type of 
encryption). 

A possible enhancement of a preferred implementation of the present 
invention is to use both decode time stamps (DTS) and presentation time sfamps 
(PTS) for PES carrying tknecode values. The application is passed an encrypted 
15 timecode value when STC=DTS, giving the application time to prepare for a display 
to be updated when the PTS occurs. 

It is appreciated that the headend and the receiver preferably comprise 
conventional elements implemented in hardware and software. For ease of depiction, 
as well as in the interest of brevity, only portions of the headend or receiver relevant 
20 to the present invention are depicted or described. For example, and without limiting 
the generality of the foregoing, conventional components used for audio encoding, 
A/V encryption, and so forth, are all omitted from the figures and description. 

The following discussion describes various components comprised in 
the headend and receiver, and which are utilized in preferred embodiments of the 
25 present invention: 
^ L Headend 

A. Application Playout 

An interactive application using an encrypted timeline is 
preferably provided as two parts: the data files to be broadcast; and the encryption key 
30 and algorithm to use at the headend. The application playout preferably provides the 
appUcation data to a carousel generator and to a tunecode generator just prior to 
broadcast of content to which the mteractive application is synchronized. 
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Application code comprises a timecode-decrypting 
algorithm and at least one of a plurality of application files comprises a timecode- 
decrypting key. These parts of the interactive application are preferably obfuscated. 
For example, and without limiting the generality of the foregoing, the method and 
5 system described in Published PCT Patent Application WO 02/079955 of NDS Ltd., 
and corresponding US Patent Application 10/472,286 of Shen Orr et al., referred to 
above and incorporated herein by reference, would provide an appropriate method 
and system for obfuscating the parts of the interactive application. 

B. Carousel Generator 

10 The carousel generator delivers the plurality of 

application files in a delivery format such as the Digital Storage Media - Command 
and Control (DSM-CC) object carousel or data carousel. 

C. Timecode Generator 

The encryption key and details on an encryption 
15 algorithm are preferably provided to the timecode generator. The timecode generator 
also receives a feed of timing information from a video encoder, which provides the 
values of the timecode plus the PTS of a corresponding video fi-ame. 

The timecode generator preferably uses the encryption 
algorithm expected by the interactive application. Downloading a new application, 
20 which implements a different encryption algorithm, easily changes the encryption 
algorithm, thereby making it disadvantageous to implement receivers that can crack 
one specific algorithm. It is appreciated that the application is preferably broadcast 
by a carousel, as is well known in the art, so the application is fi:equently available for 
download. 

25 The timecode generator creates a PES stream comprising 

values of timecode encrypted using the enayption algorithm and encryption key 
specified by the interactive application. The PES stream comprising flie timecode is 
synchronized to a video using the PES packet stmcture to associate one of a plurality 
of PTSs with each encrypted timecode value. A specific PTS associated with an 

30 encrypted timecode value matches that of the corresponding encoded video fi:ame 
fi:om the video encoder. 
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It may not be necessary to insert a timecode value for 
every frame. For example, and without limiting the generality of the foregoing, a 
PVR may use the present invention if only the encrypted timecode values for the first 
frames of Groups of Pictures (GOPs) is inserted. 
5 The timecode generator preferably produces timecode 

irrespective of whether an application requires the values; otherwise, the absence of 
information may be sufficient to indicate where advertisements are, thereby enabling 
ad-skipping by PVRs and other similar devices. 

D. Video Encoder 

10 In addition to encoding video, the video encoder 

provides timecode-to-PTS information to the timecode generator. Many MPEG video 
encoders embed Vertical Interval Timecode (VITC) timecode in GOP headers, 
thereby providing timecode-to-PTS information. The timecode generator can then 
extract the timecode-to-PTS information from the encoded video. 
15 E. Multiplexer 

The multiplexer is preferably configured usmg standard 
methods known in the art to accept the new timecode elementary stream. 
II. Receiver 

A. Demultiplexer 

20 The demultiplexer is preferably configured by software 

comprised in the receiver to extract the PES associated with a service as a whole from 
the transport stream. 

The demultiplexer preferably feeds the interactive 
application data (comprising the decryption key) to a carousel client The 
25 demultiplexer passes the timecode elementary stream, comprising the encrypted 
values of timecode, to the timecode handler. The demultiplexer passes the encoded 
video to the video decoder. 

It is appreciated that many different configurations of 
receiver hardware and software may be used in order to unplement the demultiplexer 
30 functionality. 

B. Carousel Client 
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The carousel client preferably retrieves interactive 
application code for execution by the receiver. Once running, the interactive 
application preferably uses the carousel client to retrieve files from a broadcast 
carousel. The decryption key is embedded in retrieved files so as to hide them from 
S software resident in the receiver. 

C. Timecode Handler 

The timecode handler is a receiver module that passes 
the encrypted timecode values to the interactive application when a system time clock 
(STC) value equals the time given by the PTS for die timecode PES packet. 
10 D, Video Decoder 

The video decoder outputs decoded video and provides 
STC information to the timecode handler. 

E. Running Interactive Application 

Executing the application code delivered by the 
15 broadcast carousel preferably produces a running interactive application. The running 
interactive application comprises the algorithm for decoding the encrypted timecode 
values. The key for decryptmg these values is provided in resource files for the 
application. 

The application resource files detail which values of the 
20 timecode comprise one of a plurahty of synchronization points occurring in the video. 
The running mteractive application preferably decrypts and monitors incoming 
timecode values. When one of the plurality of synchronization points occurs, the 
running interactive application preferably then updates a video display or the 
application's behavior in a way that is synchronous with the video. 
25 If there are "gaps" in the incoming timecode, the 

application interpolates the intermediate values. For example, and without limiting 
the generality of the foregoing, a timecode value may only be given for the first fi:ame 
of a GOP. To perform such an interpolation requires additional triggers, which 
indicate to the application when intermediate frames are displayed, for the in-between 
30 frames. Either the timecode handler or the video decoder preferably provides ttiese 
triggers. 
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Reference is now made to Appendix A, which is a tabular presentation 
of the format of a preferred embodiment of a timecode packet for imencrypted 
timecode values, and of an encryption header for delivering the timecode packet A 
basic textual syntax for timecode is HH:MM:SS:FF, where HH is hours, MM is 

S minutes, SS is seconds, and FF is frames. 

The format of the timecode packet for unencrypted timecode 
information is given in Table 1 of Appendix A. The timecode Jd field uniquely 
identifies a particular timeline, allowing for multiple consecutive timelines. The 
status field indicates if the particular tuneline is running or paused. 

10 The timecode packet structure is preferably encrypted using any 

appropriate type of encryption, as described above, into a sequence of encrypted bytes 
and placed in an encryption container, given in Table 2 of Appendix A. The 
encryption container is then inserted into a PES packet. 

Reference is now made to Appendix B, which is a discussion of 

15 * multiple timelines m the context of the system of Fig. 1 . In a broadcast environment 
it is necessary to distinguish between multiple timelines. For example, one timeline 
may be for an interactive advertisement and another timeline may be for the current 
program. 

It is appreciated that various features of the invention which are, for 
20 clarity, described in the contexts of separate embodiments may also be provided in 
combination in a single embodiment. Conversely, various features of the invention 
which are, for brevity, described in the context of a single embodiment may also be 
provided separately or in any suitable subcombination. 

It will be appreciated by persons skilled in the art that the present 
25 invention is not limited by what has been particularly shown and described 
heremabove. Rather the scope of the mvention is defined only by the claims which 
follow: 
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APPENDIX A 



Table 1: Unencrypted timecode values 



Syntax 


JSICS 


IK^M AWM #XM «n 

ivineinonic 


timecode_packetO { 






numjvalues 


8 


uimsbf 


for (i=0; i<niim„values; i-H-) { 






timecodejd 


8 




hours 


5 


uimsbf 


minutes 


6 


uimsbf 


seconds 


6 


uimsbf 


frames 


5 


uimsbf 


status 


2 


bslsbf 


} 






} 






Table 2: Encryption container 


Syntax 


Bits 


Mnemonic 


encryption_container() { 






encryption_type 


16 


uimsbf 


niim_encrypted_bytes 


8 


uimsbf 


^ for (i=0; i<niim_encryptedj)ytes; i++) 






encrypted„tiniecode_bj^e 


8 


bslsbf 


} 






} 
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APPENDIX B 

Reference is now made to Fig. 2, which is a graphical diagram of 
timeline plotted against System Time Clock (STC), useful for understanding the 
system of Fig. 1. 

5 The receiver preferably uses the timecode reference data conveyed in a 

timeline to compute Universal Co-ordinated Time (UTC) and STC values for a given 
content item, designated as content Jd, and timeline pair. The reference data conveys 
entries for each discontinuity in STC with respect to timeline. 

Consider the following example where a single Sl-event experiences 

10 the following transitions: 

1. the event starts with its main program content (content_id=0) at 
STC-A 

2. the event moves to commercial break and switches to content_id=l 
atSTC=B 

15 3. the event switches back to the main program content at STB=C 

4. an STC discontinuity occurs at STC=D where the STC is set to E, 
(Note, ui the diagram E > D, but this may not be so in reality) 
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What is claimed is: 

CLAIMS 

1 . A timecode generation method comprising: 

5 receiving an encryption key and an implemented encryption method; 

for each one of a plurality of frames, receiving a timecode and an 
associated presentation time stamp (PTS) associated with the one frame; 

for each one of the plurality of frames, encrypting the timecode 
associated with the one frame usmg the encryption key and the implemented 
1 0 encryption mettiod, thereby producing a plurality of encrypted timecodes; and 

at a time associated with the associated PTS associated with the one 
frame, outputtmg a packetized elementary stream (PES) comprising the plurality of 
encrypted timecod^. 

15 2. A timecode generation method comprising: 

receiving an encryption key and an implemented encryption method; 
for each one of a plurality of frames, receiving a timecode and an 
associated decoding time stamp (DTS) associated with the one frame, the DTS 
occurring in advance of a presentation time stamp (PTS) associated with the one 
20 frame; 

for each one of the plurality of frames, encrypting the timecode 
associated with the one frame using the encryption key and the implemented 
encryption method, thereby producing a plurality of encrypted timecodes; and 

at a time associated with the associated DTS associated with the one 
25 frame, outputting a packetized elementary stream (PES) comprising the plurality of 
encrypted timecodes, the PES comprismg the plurality of encrypted timecodes not 
being effective until a time associated with the PTS associated with the one frame. 

3. A timecode generator comprising: 

30 a first input unit operative to receive an encryption key and an 

implemented encryption metiiod; 



16 



Copy provided by USPTO from the IFW Image Database on 01/04/2005 



a second input irnit operative to receive a timecode and an associated 
presentation time stamp (PTS) for each one of a plurality of frames; 

an encrj^tor operative to encrypt the timecode for each one of the 
plurality of fiames, usmg the encryption key and the implemented encryption method, 
5 thereby producing a plurality of encrypted timecodes; and 

a packetized elementary stream (PES) outputter operative to receive a 
plurality of encrypted timecodes and, at a time associated with the associated 
presentation time stamp (PTS) associated with tihie one frame, to output a PES 
comprising the plurality of encrypted timecodes. 

10 

4. A timecode use method comprising: 

receivmg an application file comprising a decryption key and an 
implemented decryption method; 

receiving a packetized elementary stream (PES) comprismg a plurality 
15 of encrypted timecodes, each of the plurality of timecodes being associated with a 
presentation time stamp (PTS); and 

running the application file, the running comprising: 

performing the following when a system time clock 
(STC) value equals a PTS value associated with at least one of the plurality of 
20 encrypted timecodes: 

decrypting the encrypted timecode associated 
with the PTS value using the decryption key and the unplemented encryption method, 
thereby producing a decrypted timecode. 

25 5. A timecode use method comprising: 

receiving an application file comprising a decryption key and an 
implemented decryption method; 

receiving a packetized elementary stream OPES) comprising a plurality 
of encrypted tunecodes, each of the plurality of encrypted titnecodes being associated 
30 with a decoding time stamp (DTS), at least one of the plurality of encrypted 
tunecodes requiring that a display be updated at one of a plurality of presentation time 
stamps (PTS); 
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running the application file, the running comprising: 
performing the following when a system time 
clock (STC) value equals a DTS value associated with at least one of the plurality of 
encrypted timecodes: 

5 decrypting the encrypted timecode 

associated with the DTS value using the decryption key and the implemented 
encryption method, thereby producmg a decrypted timecode; and 

updating the display at the one of the 

plurality of PTSs. 

10 

6. A timecode handler comprising: 

a first input unit operative to receive at least one application file 
comprising a decryption key and an implemented encryption method; 

a second input unit operative to receive a packetized elementary stream 
15 (PES) comprising a plurality of encrypted timecodes, each of the plurality of 
encrypted timecodes being associated with a presentation time stamp (PTS); and 

a decryptor receiving each of the plurality of encrypted timecodes and 
operative to decrypt each of the plurality of encrypted timecodes using the decryption 
key and the implemented encryption method when a system time clock (STC) value 
20 equals a PTS value associated with each of the plurality of encrypted timecodes. 

7, A method for timeline protection comprising: 

receiving, at a timecode generator, an encryption key and an 
implemented encryption method; 
25 for each one of a plurality of firames, receiving, at the tunecode 

generator, a timecode and an associated presentation time stanip (PTS) associated 
with the one firame; 

for each one of the plurality of firames, encrypting, at the timecode 
generator, the timecode associated with the one fi:ame using the encryption key and 
30 the implemented encryption method, thereby producing a plurality of encrypted 
timecodes; 
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at a time associated with the associated presentation time stamp (PTS) 
associated with the one frame, outputting a packetized elementary stream (PES) 
comprising the plurality of encrypted timecodes; 

receiving, at a timecode handler, an application file comprising a 
5 decryption key and an implemented decryption method; 

receiving, at the thnecode handler, the PES comprising a plurality of 
encrypted timecodes, each of the plurality of timecodes being associated with a 
presentation time stamp (PTS); and 

running the application file, the running comprising: 
10 at the application file, performing the following when a 

system time clock (STC) value equals a PTS value associated with at least one of the 
plurality of encrypted timecodes: 

decrypting the encrypted timecode associated 
with the PTS value using the decryption key and the implemented encryption method, 
1 5 thereby producing a decrypted timecode. 

8. A system for timeline protection comprising: 

a timecode generator comprising: 

a timecode generator first input unit operative to receive an 
20 encryption key and an implemented encryption method; 

a timecode generator second input imit operative to receive a 
timecode and an associated presentation time stamp (PTS) for each one of aplurality 
of frames; 

a timecode generator encryptor operative to encrypt the 
25 timecode for each one of the plurality of frames, using the encryption key and the 
implemented encryption method, thereby producing a plurality of encrypted 
timecodes; 

a timecode generator packetized elementary stream (PES) 
outputter operative to receive a plurality of encrypted timecodes and, at a time 
30 associated with the associated presentation tune stamp (PTS) associated with the one 
frame, to ou^ut a PES comprismg the plurality of encrypted timecodes; and 
a timecode handler comprising: 

19 
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a timecode handler first input unit operative to receive at least 
one application file comprising a decryption key and an implemented decryption 
method; 

a thnecode handler second input unit active to receive the PES 
S comprising a plurality of encrypted timecodes, each of the plurality of encrypted 
timecodes being associated with a presentation time stamp (PTS); and 

a timecode handler decxyptor receiving each of the plurality of 
encrypted timecodes and operative to decrypt each of the plurality of encrypted 
timecodes using the decryption key and the implemented encryption method when a 
10 system time clock (STC) value equals a PTS value associated with each of the 
plurality of encrypted timecodes. 
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